Remote IAM Engineer: SSO, M&A & Automation Lead

Cardinal Health; Topeka (KS); Remote; USD 96,000 - 151,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

Flexible spending accounts (FSAs)

Short- and long-term disability

Work‑Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking an IAM Engineer to design and operate enterprise identity solutions. You will lead M&A integrations, consolidate IdPs into a unified SSO, and implement scalable IAM programs including LCM, IGA, PAM, and API-driven automation.

Ideal candidates have hands-on experience with Okta, Microsoft Entra ID, and other IAM tech, plus strong scripting and DevOps practices. Remote-friendly role focused on secure, compliant access management.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or related field, or equivalent practical experience.
• 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise-scale solutions, with M&A integration experience preferred.
• Strong command of AD, Microsoft Entra ID, LDAP, and Group Policy management.
• Extensive knowledge of SAML, OAuth, OIDC, and SCIM standards.
• Hands-on experience with IdPs and governance suites such as Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock.

Responsibilities

• Lead IAM workstreams for Mergers, Acquisitions, and Divestitures.
• Consolidate disparate IdPs into a unified enterprise SSO platform.
• Design and execute cross-domain authentication and federation strategies.
• Design, implement, and maintain scalable IAM solutions including SSO, LCM, IGA, and PAM.
• Develop automated workflows and API-driven integrations for onboarding, transitions, and offboarding (LCM).
• Implement IaC principles for IAM configuration management.
• Design and enforce Enterprise SSO security policies, including MFA and RBAC.
• Conduct access reviews and support regulatory audits to ensure compliance.
• Troubleshoot IAM issues and provide Tier 3 engineering support.
• Coordinate with cross-functional teams to align IAM with business processes.
• Maintain architecture diagrams, runbooks, and configurations.

Skills

Active Directory

Microsoft Entra ID

LDAP

SAML

OAuth

OIDC

SCIM

PowerShell

Python

Bash

Zero Trust

RBAC

MFA

DevOps

M&A

Education

Bachelor's degree in CS/IT/InfoSec or equivalent

Tools

Okta

Ping Identity

CyberArk

SailPoint

ForgeRock

Microsoft Entra ID

Job description

Cardinal Health is seeking an IAM Engineer to design and operate enterprise identity solutions. You will lead M&A integrations, consolidate IdPs into a unified SSO, and implement scalable IAM programs including LCM, IGA, PAM, and API-driven automation.

Ideal candidates have hands-on experience with Okta, Microsoft Entra ID, and other IAM tech, plus strong scripting and DevOps practices. Remote-friendly role focused on secure, compliant access management.